$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: fWfFmkssaDl6vW8awd4IXLUn3vjPmASc3ursVLO6eok= Subject key identifier: 62:34:9A:6E:9C:05:73:44:D3:24:20:2C:8F:66:A5:CA:F5:BD:24:B3 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 1D2FA0571A1737DF5700120B6EABD9D396635B24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01A4 Signing time: Sun 19 Oct 2025 02:11:23 +0000 Manifest this update: Sun 19 Oct 2025 02:06:23 +0000 Manifest next update: Wed 22 Oct 2025 10:45:23 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: 6sCL3fPdhmRFEQ5KiXSC/CrJyu+92m47M9obUfOlGlQ=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:a0:57:1a:17:37:df:57:00:12:0b:6e:ab:d9:d3:96:63:5b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Oct 19 02:06:23 2025 GMT Not After : Oct 22 10:45:23 2025 GMT Subject: CN=62349A6E9C057344D324202C8F66A5CAF5BD24B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:57:d4:9f:d6:e0:ed:1b:58:37:e8:9b:99: 12:3f:93:b9:e6:61:05:6b:67:25:9d:f5:55:0b:09: b7:75:81:d4:7e:7f:d1:25:95:eb:e7:1d:36:27:e3: 60:ad:d1:06:95:fb:07:24:ba:eb:39:62:d6:6c:cf: fe:eb:23:48:bf:ef:23:e0:6c:0e:a6:f4:e0:fc:b7: d0:d2:05:07:c9:89:a9:65:8e:28:9a:98:61:83:f7: ca:d6:30:2a:d6:e7:ce:c7:32:a2:b0:cf:64:dd:88: 1f:74:b9:1d:41:70:0f:63:f4:62:55:3c:dd:09:e3: 5c:e1:f8:d9:04:c8:d2:fe:c2:00:e2:f4:c2:d1:34: f3:f1:71:76:5c:47:e4:6b:8d:9f:55:a5:cd:26:09: 69:73:70:ab:a3:60:0b:c8:a2:e7:86:20:07:cb:60: 6c:fb:6c:c6:4a:62:ca:a4:6d:6d:36:08:e8:fe:f0: 19:14:34:45:a8:ef:07:21:8f:90:00:32:af:64:50: 29:b1:1a:71:b1:5f:05:89:f0:4f:28:2b:04:7a:71: 5f:cb:ec:0f:5e:da:da:a8:04:04:92:59:39:0c:f2: ef:7a:c7:f7:2a:9c:f4:49:8e:d4:cd:3b:30:54:3c: 0b:7a:5b:e2:69:e8:85:a1:cc:0c:b5:82:63:5b:3d: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:9A:6E:9C:05:73:44:D3:24:20:2C:8F:66:A5:CA:F5:BD:24:B3 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b7:70:4e:59:44:7e:40:59:d2:0a:d1:6d:fc:49:7b:09:48: aa:f9:64:07:ee:a6:e6:ca:8d:94:57:4c:9f:94:7c:0d:45:88: 81:62:d8:dc:bd:df:a3:e8:9f:7e:f6:f2:81:bb:a1:9e:93:70: 20:5a:77:1f:b6:c1:fc:a1:e0:cf:67:61:c1:2a:25:b8:eb:5a: 79:55:4a:09:12:93:13:26:6e:41:d9:ee:d4:8c:13:75:00:50: 6a:71:0d:bf:fb:d5:6e:59:38:54:17:90:12:2e:a0:d6:bb:9d: 62:a8:39:a7:2e:b1:57:6d:7b:db:a8:57:08:19:26:c6:0d:bc: ae:d8:0b:85:6b:4b:28:8b:f3:35:79:03:e7:58:6f:1c:37:71: 83:9c:79:23:45:24:3b:d1:e7:19:56:55:45:c9:b5:a8:87:62: f3:74:b3:9b:6c:c1:ca:5f:61:ce:d8:6e:7c:9d:17:75:a5:6d: 6c:6e:7c:af:eb:07:c0:cb:2f:71:cc:65:49:4f:27:f6:42:78: 47:c9:d1:e7:d1:d2:c5:f5:a3:51:cb:a3:96:dc:9e:76:d6:7c: 77:d3:6f:92:53:cf:cc:46:cf:f2:8b:34:17:8b:6f:ce:37:89: 30:27:c0:f1:f7:1d:45:09:6d:3e:ef:e0:db:d1:75:09:f5:de: 4b:5b:8d:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHS+gVxoXN99XABILbqvZ05ZjWyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTEwMTkwMjA2MjNaFw0yNTEwMjIxMDQ1MjNaMDMxMTAvBgNV BAMTKDYyMzQ5QTZFOUMwNTczNDREMzI0MjAyQzhGNjZBNUNBRjVCRDI0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqlfUn9bg7RtYN+ibmRI/k7nm YQVrZyWd9VULCbd1gdR+f9EllevnHTYn42Ct0QaV+wckuus5YtZsz/7rI0i/7yPg bA6m9OD8t9DSBQfJialljiiamGGD98rWMCrW587HMqKwz2TdiB90uR1BcA9j9GJV PN0J41zh+NkEyNL+wgDi9MLRNPPxcXZcR+RrjZ9Vpc0mCWlzcKujYAvIoueGIAfL YGz7bMZKYsqkbW02COj+8BkUNEWo7wchj5AAMq9kUCmxGnGxXwWJ8E8oKwR6cV/L 7A9e2tqoBASSWTkM8u96x/cqnPRJjtTNOzBUPAt6W+Jp6IWhzAy1gmNbPbLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYjSabpwFc0TTJCAsj2alyvW9JLMwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW3cE5ZRH5AWdIK0W38SXsJSKr5ZAfupubK jZRXTJ+UfA1FiIFi2Ny936Pon3728oG7oZ6TcCBadx+2wfyh4M9nYcEqJbjrWnlV SgkSkxMmbkHZ7tSME3UAUGpxDb/71W5ZOFQXkBIuoNa7nWKoOacusVdte9uoVwgZ JsYNvK7YC4VrSyiL8zV5A+dYbxw3cYOceSNFJDvR5xlWVUXJtaiHYvN0s5tswcpf Yc7YbnydF3WlbWxufK/rB8DLL3HMZUlPJ/ZCeEfJ0efR0sX1o1HLo5bcnnbWfHfT b5JTz8xGz/KLNBeLb843iTAnwPH3HUUJbT7v4NvRdQn13ktbjSA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:22 2025 by rpki-client